Its taken 4 years over which time Ted and I have been working together on cybersecurity risk management. From the our origins of the U.S DoD CMMC program, the Augusta Group and Veritas GRC we have never met. We finally…
This is dangerous for so many reasons, and has all the hall marks of crypto and NFTs 2. Firstly can anyone say what cybersecurity risk management looks like? Secondly according to Munich RE 87% of the C-level respondents reported that…
Germany wants to be a leader in Cybersecurity. The head of Germanys BSI wants her office to coordinate cyber across country. That does not exist today. One believes that there needs to be coordination of national cybersecurity risk management. Without…
Thank you for posting Brian D. McCarthy, this is an important document for Critical National Infrastructure providers in the U.S. The definition of CNI is very clear. The order addresses the need to ensure that cybersecurity risk management is an…
The conversation in the media is starting to change, as the realization of cybersecurity risk management regulation, regulatory oversight and legal action dawns. The challenge for CISO is not one of cybersecurity, its now one of cybersecurity risk management, regulatory…
Cyber insurance requires a new approach, without a doubt. But is a backstop one answer. One only has to look at the recent attack on United health and its effects across the U.S healthcare industry and the ratcheting up of…
This makes for interesting reading. The Testimony of the CEO of United Health ahead of the testimony of the CEO of United Health CEO, to the Energy and Commerce Subcommittee of Oversight and Investigations. Amongst other things, confirming that United…
Cybersecurity and Enterprise Wide Risk are at the top of the Audit Committee Agenda as cybersecurity risk management regulation transfers cyber risk into the boards rooms of covered entities. A risk that may receive more prominence if PCAOB proposals to…
The U.S accounting regulator, the PCAOB, wants audit firms to take on more responsibilities for the detection of fraud. That includes greater oversight of cybersecurity risks (). Changes that members of the audit profession see as an overhaul of the…
There’s a slow awakening that EU NIS 2 and DORA are on their way and they will affect the boards of covered entities, that includes the potential for civil and criminal penalties and temporary board suspensions. In Ireland alone over…
